CVE-2020-36157

10CRITICAL

Key Information:

Vendor
Wordpress
Status
Ultimate Member
Vendor
CVE Published:
4 January 2021

Summary

An issue was discovered in the Ultimate Member plugin before 2.1.12 for WordPress, aka Unauthenticated Privilege Escalation via User Roles. Due to the lack of filtering on the role parameter that could be supplied during the registration process, an attacker could supply the role parameter with a WordPress capability (or any custom Ultimate Member role) and effectively be granted those privileges.

References

https://wordpress.org/plugins/ultimate-member/#developers
x_refsource_MISC
https://www.wordfence.com/blog/2020/11/critical-privilege...
x_refsource_MISC
https://wpscan.com/vulnerability/33f059c5-58e5-44b9-bb27-...
x_refsource_MISC

CVSS V3.1

Score:
10
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.